⚡ Weekly Recap: Oracle 0-Day, Bit Locker Bypass, VMScape, WhatsApp Worm & More

Summary: Threat actors tied to the Cl0p ransomware group exploited a zero-day in Oracle E-Business Suite, tracked as CVE-2025-61882 with a CVSS score of 9.8, allowing an unauthenticated attacker with HTTP network access to compromise the Oracle Concurrent Processing component. Mandiant CTO Charles Carmakal said Cl0p exploited multiple Oracle EBS vulnerabilities, including ones patched in Oracle's July 2025 update and CVE-2025-61882 patched that weekend, to steal large amounts of data from several victims in August 2025.
Key Takeaway: Cl0p pulled large data thefts from multiple victims in a single month by chaining an already-patched Oracle flaw with a fresh zero-day, so a patch cadence that lags even one cycle hands the group a working entry point.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2024-58260 CVE-2025-10547 CVE-2025-10725 CVE-2025-27915 CVE-2025-30247 CVE-2025-4008 CVE-2025-41250 CVE-2025-41251 CVE-2025-41252 CVE-2025-43400 CVE-2025-49844 CVE-2025-52906 CVE-2025-57714 CVE-2025-59934 CVE-2025-59951 CVE-2025-61882 CVE-2025-9230 CVE-2025-9231 CVE-2025-9232
Related: ⚡ Weekly Recap: WhatsApp Worm, Critical CVEs, Oracle 0-Day, Ransomware Cartel & More Cyber Risks ·
CVE-2025-27915: Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Known Exploited Vulnerabilities · Oct 07, 2025
CVE-2025-61882: Oracle E-Business Suite Unspecified Vulnerability Known Exploited Vulnerabilities · Oct 06, 2025